Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa
File: 9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa (raw, json)
Hash identifier: 2N8tEa4qhTWPnO2gzB/1RIsg5hDVXxkPxhZM6MPu9VY=
Subject key identifier: C8:83:2B:09:CF:95:0D:1A:C2:62:90:25:A4:F3:AC:E2:08:2F:C6:E7
Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial: 010D0C9F432858491D717A531CB3D5B9559A7780
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 8987
IP address blocks: 130.137.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:7a:53:1c:b3:d5:b9:55:9a:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=908f31b2-2ee8-4e29-8a9a-b478f61c4c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:46:98:70:53:ac:bd:54:3f:9b:90:96:91:
b2:b6:cc:7d:bb:e1:1d:9e:ac:61:c5:6f:5c:39:b8:
ee:5c:f5:5b:91:12:74:e7:73:25:43:ad:5e:fb:7a:
e6:00:cb:e1:4f:6e:8b:7a:d0:c7:8e:ac:42:df:5d:
89:3d:1f:2b:5e:fe:92:07:06:94:92:e5:95:53:06:
32:41:1b:2c:1e:99:0f:97:74:8f:9e:c6:51:a7:e3:
de:a7:10:b3:e8:fe:e1:94:39:63:cd:50:b3:ca:b0:
9a:22:15:79:c3:65:ac:51:bb:90:c8:9b:c5:eb:92:
72:83:0e:75:73:f3:00:8d:65:90:19:2f:38:5c:1e:
a6:bd:06:1a:68:00:c0:2d:b2:13:88:d7:f3:03:af:
39:cc:06:cd:6d:39:a6:b8:c6:28:98:9e:c6:bc:dd:
e7:9d:09:f0:83:ff:fc:bc:29:d2:de:ab:3b:c1:56:
94:01:f9:db:f9:67:28:0b:1e:14:74:d4:c3:0d:d5:
fa:d1:f9:5a:d4:60:07:52:9c:d4:04:d0:8f:1b:42:
d4:0f:0d:9c:5e:1c:f4:4f:a0:a1:7e:78:7a:86:08:
68:88:31:eb:85:91:3f:98:80:9c:60:e1:d8:43:d6:
81:03:dc:d9:bc:12:4f:f1:df:0f:77:b1:f8:b4:20:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:83:2B:09:CF:95:0D:1A:C2:62:90:25:A4:F3:AC:E2:08:2F:C6:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
X509v3 Authority Key Identifier:
keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
sbgp-ipAddrBlock: critical
IPv4:
130.137.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:5b:0f:72:9b:e0:9b:39:a5:b7:80:f1:d6:9d:bb:9b:49:9d:
aa:ed:51:06:d1:74:f9:6d:99:92:25:06:e9:25:d1:4d:4d:5f:
cb:34:54:1d:25:78:bb:5d:25:02:a5:55:c6:aa:53:92:da:e9:
1a:88:e6:ad:1e:7a:78:f5:8d:a4:97:c5:bb:36:2b:b7:c5:6e:
f1:b6:e2:c8:01:7a:70:ba:a4:da:5e:56:bf:85:5e:cc:32:4a:
d4:57:fa:b3:94:d3:5a:51:9c:21:87:04:3d:e3:b2:77:34:8f:
99:f1:f3:d5:03:19:3b:d9:66:07:71:2e:85:c7:72:ef:7a:77:
3e:3f:a2:52:4f:22:8e:d5:91:7c:b0:58:4e:b5:ff:cc:74:16:
32:16:d2:59:1d:ce:8c:73:85:1a:2b:85:36:2f:3f:cb:ca:c7:
60:19:69:fe:eb:a2:ea:06:bf:dd:82:44:83:84:83:87:79:ac:
6e:d4:35:64:8f:f0:fe:5b:5d:1a:51:9d:28:be:30:d7:84:5d:
b2:39:62:e3:7b:c6:9c:27:39:0b:f5:c0:48:55:c5:9a:6d:04:
d1:85:2b:7e:af:1d:e1:6a:12:8a:e9:67:ae:93:22:f2:f1:a4:
36:77:9c:19:4e:32:8b:99:67:e4:dc:ba:ba:c3:e8:f4:ba:6b:
17:24:fa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:29:08 2025 by rpki-client